Information processing apparatus, control method for the information processing apparatus, and storage medium

ABSTRACT

An information processing apparatus that performs a direct wireless communication with a communication terminal includes a wireless LAN interface, a memory device that stores set of instructions, and at least one processor that executes the instructions of controlling the wireless LAN interface to activate an access point to be used in the direct wireless communication, and controlling, upon condition that the information processing apparatus operates in a first mode where an instruction for a predetermined setting change of the information processing apparatus is waited for from the communication terminal by using the direct wireless communication, transmission and reception of data via the access point by using a first communication filter, and controlling, upon condition that the information processing apparatus operates in a second mode which is different from the first mode, the transmission and the reception of the data via the access point by using a second communication filter.

BACKGROUND OF THE INVENTION Field of the Invention

The present invention relates to an information processing apparatus, acontrol method for the information processing apparatus, and a storagemedium.

Description of the Related Art

The number of information processing apparatuses such as multi functionperipherals and printers including a wireless local area network (LAN)function has been increased. Among these information processingapparatuses, some apparatuses include a software AP function for theapparatus itself to operate as an access point (AP) and can performtransmission and reception of information by establishing a wirelesscommunication with a communication terminal without the intermediationof an external relay apparatus (which will be referred to as a directwireless communication). Japanese Patent Laid-Open No. 2013-205982describes an information processing apparatus that establishes awireless communication with a mobile terminal and performs transmissionand reception of audio data and photograph data with a communicationterminal such as the mobile terminal by using the established wirelesscommunication.

To easily perform a setting for a wireless network of the informationprocessing apparatus, a method of performing a network setting of theinformation processing apparatus via an operation unit of acommunication terminal different from the information processingapparatus has been proposed (Japanese Patent Laid-Open No. 2010-98765).The communication terminal described in Japanese Patent Laid-Open No.2010-98765 displays a list of APs discovered by a search on theoperation unit of the communication terminal. A user selects an AP towhich the information processing apparatus is to be connected from thelist of APs displayed on the operation unit of the communicationterminal. The communication terminal transmits information related tothe selected AP to the information processing apparatus. The informationprocessing apparatus can perform a setting of a network at a connectiondestination on the basis of the information related to the AP receivedfrom the communication terminal.

A port (permitted port) where its use is permitted in a communication toimprove a security is previously set and used as a port filter of thecommunication in some cases in the information processing apparatus suchas a printing apparatus or a personal computer (PC). In a case where aport used in the communication is not the permitted port in theabove-described information processing apparatus, received data can bediscarded, and the security of the information processing apparatus canbe improved. In addition, an information processing apparatus such as amulti function peripheral including a mobile printing function forperforming printing from the communication terminal by using the directwireless communication has been proposed.

SUMMARY OF THE INVENTION

According to an aspect of the present invention, there is provided aninformation processing apparatus that performs a direct wirelesscommunication with a communication terminal, the information processingapparatus including: a wireless local area network (LAN) interface; amemory device that stores set of instructions; and at least oneprocessor that executes the instructions of controlling the wireless LANinterface to activate an access point to be used in the direct wirelesscommunication, and controlling, upon condition that the informationprocessing apparatus operates in a first mode where an instruction for apredetermined setting change of the information processing apparatus iswaited for from the communication terminal by using the direct wirelesscommunication, transmission and reception of data via the access pointby using a first communication filter, and controlling, upon conditionthat the information processing apparatus operates in a second modewhich is different from the first mode, the transmission and thereception of the data via the access point by using a secondcommunication filter.

Further features of the present invention will become apparent from thefollowing description of exemplary embodiments with reference to theattached drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 illustrates an example of a printing system.

FIG. 2 illustrates an example of a hardware configuration of a multifunction peripheral (MFP).

FIG. 3 is an explanatory diagram for describing an example of a screendisplayed on an operation unit of the MFP.

FIGS. 4A and 4B are explanatory diagrams for describing an example ofthe screen displayed on the operation unit of the MFP.

FIGS. 5A and 5B are explanatory diagrams for describing an example ofthe screen displayed on the operation unit of the MFP.

FIG. 6 is an example of a flow chart illustrating control of the MFP.

FIG. 7 is an example of a flow chart illustrating control related to amobile cooperation of the MFP.

FIG. 8 is an example of a flow chart illustrating control related to anaccess point (AP) of the MFP.

FIGS. 9A and 9B illustrate an example of a port filter stored in astorage.

FIG. 10 is an example of a flow chart illustrating a modified example ofthe control related to the AP of the MFP.

FIGS. 11A and 11B are explanatory diagrams for describing an example ofthe screen displayed on the operation unit of the MFP.

DESCRIPTION OF THE EMBODIMENTS

According to one aspect of the present invention, there is provided amethod of performing a network setting of the information processingapparatus by using a direct wireless communication from a communicationterminal for an information processing apparatus such as a multifunction peripheral or a printer including a mobile printing functionfor performing printing from the communication terminal by using thedirect wireless communication.

According to another aspect of the present invention, there is provideda method of controlling communications in accordance with an intentionof an administrator or the like without uniformly permitting thecommunications with respect to various services provided by theinformation processing apparatus in a case where the direct wirelesscommunication is performed between the information processing apparatusand the communication terminal.

For example, a case will be considered where a data communication isperformed from the communication terminal that establishes a wirelesscommunication with the information processing apparatus to perform adirect wireless communication with respect to a service of mobileprinting or a service of network setting of the information processingapparatus. In this case, when a general user establishes the wirelesscommunication for the mobile printing, a method is provided in which itis possible to suppress rewrite of network setting information by usingthe network setting service from the communication terminal of the userwhile a security issue is taken into account. In addition, in a casewhere a network administrator or the like desires to use the networksetting service by using the communication terminal, a method isprovided in which it is possible to appropriately control thecommunication such that the network setting service can be used.

According to an aspect of the present invention, there is provided amethod of performing a communication control based on different portfilters in accordance with operation modes when the direct wirelesscommunication is performed and appropriately performing a cooperationbetween the communication terminal and the information processingapparatus. Hereinafter, exemplary embodiments of the present inventionwill be described with reference to the drawings. It should be notedthat the following exemplary embodiments are not intended to limit theinvention related to the scope of the claims, and all of combinations ofdescribed features according to the exemplary embodiments are notnecessarily essential to the solving method for the invention.

First Exemplary Embodiment

First, a configuration of a communication system according to anexemplary embodiment of the present invention will be described withreference to FIG. 1. The communication system according to the presentexemplary embodiment is constituted by a multi function peripheral (MFP)101, a communication terminal 102, and an access point (AP) 103.

The communication terminal 102 can execute a wireless communicationbased on IEEE 802.11 specifications (hereinafter referred to as 802.11specifications). When the user inputs an extended service set identifier(ESSID) and a security key to the communication terminal 102 toestablish a connection to the AP 103, the communication terminal 102 canbe connected to a network provided by the AP 103.

The MFP 101 includes a reading function for reading an image on anoriginal and a printing function for printing the image on a sheet. TheMFP 101 also includes a mobile printing function for receiving printdata via a wireless network and printing the image on a sheet.

When the ESSID and the security key for establishing the connection tothe AP 103 are set as a wireless network setting of the MFP 101, thecommunication terminal 102 and the MFP 101 can perform a wirelesscommunication via the AP 103.

Hereinafter, according to the present exemplary embodiment, a mode inwhich the communication terminal 102 and the MFP 101 perform thecommunication via the AP 103 will be referred to as an infrastructurewireless communication. It should be noted that the networkadministrator can set a mode (referred to as an infrastructure mode) inthe MFP 101 on whether or not an infrastructure wireless communicationis permitted according to the present exemplary embodiment. In a casewhere the infrastructure mode is set as ON, the MFP 101 is put into astate in which a connection can be established to an external accesspoint (operative state in the infrastructure mode). On the other hand,in a case where the infrastructure mode is set as OFF, the MFP 101 isput into a state in which the connection to the external access point isrestricted (state in which the operation in the infrastructure mode isnot performed).

The communication terminal 102 communicates with the MFP 101 via the AP103. The communication terminal 102 can transmit the print data to theMFP 101 via the AP 103. The MFP 101 that has received the print dataexecutes printing based on the print data.

The MFP 101 activates a software AP, so that it is also possible towirelessly communicate with the communication terminal 102 without theintermediation of a relay apparatus such as the AP 103.

In a case where the MFP 101 activates the software AP, the communicationterminal 102 can be connected to the software AP provided by the MFP101.

The user inputs connection information (such as the ESSID and thesecurity key) for establishing the connection to the software APactivated by the MFP 101 to the communication terminal 102. Thecommunication terminal 102 is connected to the software AP provided bythe MFP 101 on the basis of the connection information input by theuser. The communication terminal 102 connected to the software APprovided by the MFP 101 can execute the direct wireless communicationwith the MFP 101 without the intermediation of the relay apparatus suchas the AP 103. Hereinafter, according to the present exemplaryembodiment, a mode in which the communication terminal 102 performs thewireless communication with the MFP 101 without the intermediation ofthe relay apparatus such as the AP 103 will be referred to as a directwireless communication.

The communication terminal 102 can communicate the MFP 101 with by usingan infrastructure wireless communication or the direct wirelesscommunication.

Communication Terminal

First, the communication terminal 102 will be described. Thecommunication terminal 102 is an information processing apparatus suchas, for example, a smart phone, a tablet terminal, or a personalcomputer (PC), and applications for various uses are installed in thecommunication terminal 102. According to the present exemplaryembodiment, it is presumed that a setting application that provides afunction for performing a network setting of a device existing in thevicinity of the communication terminal 102 is installed in thecommunication terminal 102. It is also presumed that a printingapplication for providing a printing function with which the print datacan be transmitted to the MFP 101 to perform printing is installed inthe communication terminal 102. The printing application transmits theprint data to the MFP 101 by using the infrastructure wirelesscommunication or the direct wireless communication, so that the MFP 101can perform the printing.

It should be noted that the case has been exemplified where the settingapplication and the printing application are provided as individualapplications according to the present exemplary embodiment, but theconfiguration is not limited to this. For example, a mode may be adoptedwhere an operating system (OS) that controls the communication terminal102 in an overall manner provides the printing function and the settingfunction described above as basic functions of the OS.

Information Processing Apparatus

Next, the MFP 101 will be described. FIG. 2 is a block diagramillustrating a hardware configuration of the MFP 101.

The control unit 110 including a central processing unit (CPU) 111controls an operation of the entirety of the MFP 101. The CPU 111 readsout control programs stored in a read only memory (ROM) 112 or a storage114 and performs various controls such as printing control and readingcontrol. The ROM 112 stores the control programs that can be executed bythe CPU 111. A random access memory (RAM) 113 is a main storage memoryof the CPU 111 and used as a work area or a temporary storage area fordeveloping commands of the various control programs. The storage 114stores print data, image data, various programs, and various settinginformation.

It should be noted that the single CPU 111 executes respectiveprocessings illustrated in flow charts which will be described below byusing the single memory (RAM 113) in the MFP 101 according to thepresent exemplary embodiment, but another mode may also be adopted. Forexample, the respective processings illustrated in flow charts whichwill be described below can be executed by a plurality of CPUs, RAMs,ROMs, and storages in cooperation with one another. Part of theprocessings may also be executed by using a hardware circuit such as anapplication specific integrated circuit (ASIC) or a field-programmablegate array (FPGA).

An operation unit interface (I/F) 115 connects an operation unit 116 toa control unit 110. The operation unit 116 is provided with a liquidcrystal display unit including a touch panel function, various hardkeys, and the like and functions as a display unit that displaysinformation and an acceptance unit that accepts an instruction from theuser.

A reading unit I/F 117 connects a reading unit 118 to the control unit110. The reading unit 118 reads the original and generates a read image.The generated read image is transmitted to an outside via a network orused for printing.

A printing unit I/F 119 connects a printing unit 120 to the control unit110. The printing unit 120 prints an image on a sheet on the basis ofthe print data received from the outside or the read image.

The control unit 110 is connected to a network which is not illustratedin the drawing via a wired LAN I/F 121. The wired LAN I/F 121 transmitsan image or information to an external apparatus on the network which isnot illustrated in the drawing and receives the print data or theinformation from the external apparatus on the network.

Furthermore, the control unit 110 is provided with a wireless LAN I/F122. The wireless LAN I/F 122 provides a function of a wireless clientfor performing a wireless communication by establishing a connection tothe external AP and the function of the software AP for the MFP 101 toact as the AP.

The function of the wireless client of the MFP 101 is operated in a casewhere the infrastructure mode is ON. A connection to an external accesspoint is established on the basis of the wireless network setting storedin the MFP 101 in a case where the infrastructure mode is ON. Forexample, when the ESSID and the security key for establishing theconnection to the AP 103 are set as the wireless network setting, theMFP 101 can perform the wireless communication via the AP 103 withanother apparatus connected to the AP 103.

The software AP is activated in a case where an access point mode is ON.In a case where the user sets the access point mode as ON, the wirelessLAN I/F 122 activates the software AP and operates as the AP to whichthe external apparatus can be connected. The ESSID and the security keyfor establishing the connection to the software AP are displayed on theoperation unit 116 of the MFP 101 in accordance with a user operation.According to the present exemplary embodiment, the wireless LAN I/F 122according to the present exemplary embodiment can activate the singlesoftware AP, but a plurality of software APs are not activated at thetime same.

Therefore, the physical network interfaces included in the MFP 101 aretwo network interfaces including the wired LAN I/F 121 and the wirelessLAN I/F 122, but the MFP 101 logically includes three networkinterfaces.

To distinguish these network interfaces from one another, the networkinterface where the data is transmitted and received via the wired LANI/F 121 will be referred to as “eth0”. The network interface where thedata is transmitted and received with the external AP in theinfrastructure mode will be referred to as “wlan0”. The networkinterface where the data is transmitted and received via the software APwill be referred to as “wlan1”.

It should be noted that the wireless LAN I/F 122 according to thepresent exemplary embodiment can operate the function of the wirelessclient and the function of the software AP at the same time, but theconfiguration is not limited to this. For example, in a case where thewireless LAN I/F 122 can operate only one of the function of thewireless client and the function of the software AP, the wireless LANI/F 122 may perform exclusive processing to select and operate one ofthe modes. In this case, for example, when the infrastructure mode isset as ON to perform the infrastructure wireless communication, theaccess point mode may be set as OFF to stop the operation of thesoftware AP. When the access point mode is set as ON to activate thesoftware AP, the infrastructure mode may be set as OFF to restrict theconnection to the external access point.

In addition, according to the present exemplary embodiment, the MFP 101is exemplified as an example of the information processing apparatus incooperation with the communication terminal 102, but the configurationis not limited to this. The exemplary embodiment can also be applied tovarious devices that can start the software AP to perform a cooperationwith the other apparatus. For example, the configuration can also beapplied to a single function peripheral (SFP) such as a scannerapparatus and a printer apparatus and a device such as a digital cameraand a digital signage apparatus.

Cooperation with the Communication Terminal by Using the Software AP

Next, a function of performing a cooperation with the communicationterminal 102 by using the software AP according to the present exemplaryembodiment will be described.

The MFP 101 uses the software AP for a plurality of uses. First, whenthe mobile printing function (service) is provided to the user of theMFP 101, the software AP is used as a first use. For example, in a casewhere printing is desired to be performed from a communication terminalof an office visitor, a privately owned communication terminal, or thelike, use of an infrastructure environment installed in a company is notpermitted in many cases from the viewpoint of security. In view of theabove, the MFP 101 according to the present exemplary embodimentestablishes the wireless communication between the software AP activatedby the MFP 101 and the communication terminal 102 and provides themobile printing function for receiving the print data by the directwireless communication to perform the printing.

To use the network setting function provided to the networkadministrator of the MFP 101 or the like, the software AP is used as asecond use.

As described above, the network administrator can perform the setting ofthe wireless network of the MFP 101 by using the setting application ofthe communication terminal 102. At this time, the setting application ofthe communication terminal 102 establishes the wireless communicationwith the software AP of the MFP 101 and transmits setting data of thewireless network by the direct wireless communication. The MFP 101performs processing based on the setting data received from thecommunication terminal 102 by the service for cooperating with thesetting application. Specifically, the ESSID and the security keyincluded in the received data are stored as the wireless networksetting. The service for cooperating with the setting applicationreflects the wireless network setting and connects the MFP 101 to the APoutside the apparatus.

At this time, in a case where the direct wireless communication via thesoftware AP of the MFP 101 is performed between the MFP 101 and thecommunication terminal 102, an issue occurs from the viewpoint ofsecurity if communications with respect to various services of the MFP101 are uniformly permitted.

For example, when a general user establishes the wireless communicationfor the mobile printing and performs the direct wireless communication,the security issue occurs if the network setting information can berewritten by using the network setting service from the communicationterminal of the user.

On the other hand, when the direct wireless communication is performedby using the software AP, if communications other than thecommunications used in the mobile printing service are uniformlyprohibited, the communications with respect to the above-describednetwork setting service are restricted, and there is a risk that thesetting is not performed. Therefore, in a case where the networkadministrator or the like desires to use the network setting service byusing the communication terminal, there is a risk that the networksetting service is not used.

In view of the above, according to the present exemplary embodiment,operation modes for performing the direct wireless communication arevaried when the function designed for the general user such as themobile printing function is provided and when the network settingfunction designed for the network administrator is provided.Furthermore, different port filters are applied to the network interfacewhere the transmission and the reception of the data are performed viathe software AP in accordance with the operation modes, and thecooperation between the communication terminal 102 and the MFP 101 canbe appropriately performed. Hereinafter, a method of realizing thesecontrols will be described.

Activation of the Software AP

First, a method for the user of the MFP 101 to activate the software APof the MFP 101 will be described.

It should be noted that, according to the present exemplary embodiment,a case where the function such as the mobile printing function designedfor the general user is used will be referred to as a mobile cooperationmode, and a case where the network setting function designed for thenetwork administrator is used will be referred to as a wireless LANsetting mode.

A method for the user to activate the software AP for the mobilecooperation mode will be described with reference to FIG. 3 and FIGS. 4Aand 4B.

FIG. 3 illustrates an example of a screen displayed on the operationunit 116 of the MFP 101. In FIG. 3, a main menu screen 300 for the userof the MFP 101 to select the respective functions of the MFP 101 isillustrated as an example. The user selects a key (displayed item) forusing a copy function or a scanning function of the MFP 101 from themain menu screen 300, so that it is possible to use the respectivefunctions of the MFP.

A mobile portal key 301 is a key used in a case where a cooperation withthe communication terminal 102 such as the smart phone or the tabletterminal is performed. When the user selects the mobile portal key 301,it is possible to shift the screen displayed on the operation unit 116to a mobile portal screen.

FIGS. 4A and 4B illustrates examples of the screen displayed on theoperation unit 116 of the MFP 101. In FIGS. 4A and 4B, the mobile portalscreen is illustrated as an example.

The user can check information used when the communication terminal 102and the MFP 101 are connected to each other and change a connectionmethod to the communication terminal 102 via mobile portal screens 400and 410.

A LAN connection key 401 is a key used in a case where the MFP 101 andthe communication terminal 102 are connected to the same network (forexample, the AP 103). When the LAN connection key 401 is pressed, aconnection support screen (not illustrated in the drawing) is displayed.A QR code (registered trademark) including an IP address of theapparatus or the like is displayed on the connection support screen. Theprinting application of the communication terminal reads the QR codedisplayed on the operation unit 116 and obtains the IP addresscorresponding to an address where the print data is transmitted to theMFP 101. In addition, the print data is transmitted to the MFP 101 byusing the obtained address.

A direct connection key 402 is a key used in a case where the connectionfor the direct wireless communication is established between the MFP 101and the communication terminal 102 to perform the mobile printingfunction. It should be noted that FIGS. 4A and 4B illustrate a screen ina case where the direct connection key 402 is selected as an example.

A start key 403 is a key used in a case where the software AP to be usedin the direct wireless communication is activated. The CPU 111 switchesthe screen displayed on the operation unit 116 to the mobile portalscreen 410 exemplified in FIG. 4B on the basis of the selection of thestart key 403 by the user.

The CPU 111 also sets the access point mode as ON and controls thewireless LAN I/F 122 to activate the software AP for the mobilecooperation mode.

Herein, a case is exemplified where the software AP is activated byusing a setting that the ESSID for identifying the access point is“PRINTER-AP” and the network key is “123” when the software AP for themobile cooperation mode is activated. It should be noted that, accordingto the present exemplary embodiment, the setting of the ESSID and thenetwork key of the software AP to be activated is previously stored inthe storage 114 of the MFP 101, but the configuration is not limited tothis. For example, the ESSID can be generated from a name or a model ofthe MFP 101 or the like or generated by using information such as a dateor a time. In addition, the network key may be generated at random whenthe software AP is activated. A configuration can also be adopted wherethe user or the network administrator can change the setting of theESSID and the network key when the software AP for the mobilecooperation mode is activated.

Information 411 is displayed on the mobile portal screen 410 as theconnection information for establishing the connection to the softwareAP of the MFP 101. In addition, the QR code 412 including the connectioninformation such as the ESSID and the network key is displayed on themobile portal screen 410. An end key 413 is a key used when the softwareAP for the mobile cooperation mode is stopped. The MFP 101 stops theoperating software AP for the mobile cooperation mode on the basis ofthe selection of the end key 413 by the user.

The printing application of the communication terminal 102 asks the userto read the QR code by using a camera (not illustrated in the drawing)of the communication terminal 102, and it is possible to obtain theconnection information for establishing the connection to the softwareAP of the MFP 101. The printing application of the communicationterminal 102 also asks the user to input the ESSID and the network key,and it is possible to obtain the connection information. The user canfigure out the ESSID and the network key that are to be input to theprinting application by looking at the information 411 displayed on themobile portal screen 410.

The CPU 111 also applies the port filter for performing communicationaccess control to “wlan1” corresponding to the network interface wherethe data is transmitted and received via the software AP. This portfilter is a filter in which the communication for using the functiondesigned for the general user such as the mobile printing function ispermitted and the data reception is rejected (reception data isdiscarded) in the other communications. A specific example of the portfilter will be described with reference to a flow chart which will bedescribed below.

As a result of this processing, the communication for using the functiondesigned for the general user such as the mobile printing function canbe permitted in a state in which the MFP 101 activates the software APfor the mobile cooperation mode. In addition, as a result of thisprocessing, it is possible to discard the other communication (forexample, the reception of the setting data transmitted from theabove-described setting application) in a state in which the MFP 101activates the software AP for the mobile cooperation mode.

Next, a method for the user to activate the software AP for the wirelessLAN setting mode will be described with reference to FIGS. 5A and 5B.

FIGS. 5A and 5B illustrate a setting screen 500 for the wireless LAN asan example of a screen displayed on the operation unit 116 of the MFP101. When the selection of the item of the network setting by theadministrator of the MFP 101 is accepted from a setting screen (notillustrated in the drawing) for setting an operation of the MFP, the MFP101 displays the setting screen 500 for the wireless LAN on theoperation unit 116. It should be noted that, according to the presentexemplary embodiment, a setting is performed such that only a user (forexample, a device administrator) who has an authority of networkmanagement can perform the setting based on the setting screen 500 tosuppress an unexpected change of the network setting of the MFP 101. Forexample, the MFP 101 performs user authentication before the settingscreen 500 is displayed, and the setting screen 500 is displayed only ina case where this authentication succeeds.

A setting with respect to the wireless LAN I/F 122 can be performed onthe setting screen 500. A “manual setting” key 501 is a key used in acase where a setting with regard to the external AP to which the MFP 101is connected is manually performed. When the “manual setting” key 501 isselected, the user can perform the wireless network setting of the MFP101 from an input screen (not illustrated in the drawing). In this case,the user inputs the ESSID of the AP that is to be connected by the MFP101 and the security key from the input screen to perform the manualwireless network setting.

A “use wireless LAN setting service” key 502 is a key used in a casewhere the setting with respect to the wireless LAN I/F 122 is performedin cooperation with the setting application of the communicationterminal 102.

When it is determined that the “use wireless LAN setting service” key502 is selected, the CPU 111 sets the access point mode as ON andactivates the software AP for the wireless LAN setting mode. The CPU 111also switches the screen displayed on the operation unit 116 to a screen510 exemplified in FIG. 5B on the basis of the selection of the startkey 403 by the user.

Herein, a case is exemplified where the software AP is activated whilethe ESSID is set as “PRINTER-ConfigAP” and the network key is set as“456” when the software AP for the wireless LAN setting mode isactivated. It should be noted that the setting of the ESSID of thesoftware AP to be activated or the network key is previously stored inthe storage 114 of the MFP 101 according to the present exemplaryembodiment, but the configuration is not limited to this. For example,the ESSID can be generated from a name or a model of the MFP 101 or thelike or generated by information such as a date or a time. In addition,the network key may be generated at random when the software AP isactivated. A configuration can also be adopted where the user or thenetwork administrator can change the setting of the ESSID and thenetwork key when the software AP for the mobile cooperation mode isactivated.

Information 511 is displayed on the screen 510 as the connectioninformation for establishing the connection to the software AP for thewireless LAN setting mode of the MFP 101. A QR code 512 including theconnection information such as the ESSID and the network key is alsodisplayed on the screen 510. An end key 513 is a key used in a casewhere the software AP for the wireless LAN setting mode is stopped. Whenit is detected that the user selects the end key 513, the MFP 101 stopsthe operating software AP for the wireless LAN setting mode.

When the setting application of the communication terminal 102 asks theuser to read the QR code by using the camera (not illustrated in thedrawing) of the communication terminal 102, it is possible to obtain theconnection information for establishing the connection to the softwareAP for the wireless LAN setting mode of the MFP 101. In addition, whenthe setting application of the communication terminal 102 asks the userto input the ESSID and the network key, it is possible to obtain theconnection information. The user can figure out the ESSID and thenetwork key that are to be input to the printing application by lookingat the information 511 displayed on the screen 510.

The CPU 111 applies a port filter for performing the communicationaccess control to “wlan1” where the data is transmitted and received viathe software AP. This port filter is a filter in which the communicationused in the cooperation with the setting application is permitted, andthe received data is discarded in the other communication. A specificexample of the port filter will be described with reference to a flowchart which will be described below.

Next, control related to the cooperation between the MFP 101 and thecommunication terminal 102 will be described with reference to flowcharts of FIG. 6 to FIG. 8. Respective operations (steps) illustrated inthe flow charts of FIG. 6 to FIG. 8 are realized when the CPU 111 readsout programs for realizing respective control modules which are storedin the ROM 112 or the storage 114 onto the RAM 113 to be executed.

The CPU 111 executes the flow charts of FIG. 6 to FIG. 8 in a case wherethe MFP 101 operates in a normal mode while a power source is ON. Whenthe MFP 101 is supplied with power and the MFP 101 can be used byvarious boot programs, the CPU 111 executes the control illustrated inthe flow chart illustrated in FIG. 6.

In S601, the CPU 111 determines whether or not a display instruction ofthe mobile portal screen is accepted. In a case where the mobile portalkey 301 is selected via the main menu screen 300, the CPU 111 determinesthat the display instruction of the mobile portal screen is accepted,and the processing proceeds to S602. In a case where the mobile portalkey 301 is not selected via the main menu screen 300, it is determinedthat the display instruction of the mobile portal screen is notaccepted, and the processing proceeds to S605.

In S602, the CPU 111 displays the mobile portal screen on the operationunit 116, and the processing proceeds to S603. In S603, the CPU 111determines whether or not an instruction for starting the wirelessdirect is accepted via the mobile portal screen 400. In a case where theinstruction for starting the wireless direct is accepted, the processingproceeds to S604. In a case where the instruction for starting thewireless direct is not accepted, the processing returns to S602, and thestart instruction by the user is waited for. It should be noted that theCPU 111 returns to the processing in S601 in a case where the useroperation for shifting to a main menu or the like is accepted in a statein which the mobile portal screen is displayed.

In S604, the CPU 111 stores a flag indicating that the operation isperformed in the mobile cooperation mode in the RAM 113, and theprocessing proceeds to S608. The flag stored in the RAM 113 will beappropriately referred to in a step which will be described below.

In S608, the cooperation processing with the communication terminal 102using the direct wireless communication is performed. Specific contentsthereof will be described below.

On the other hand, in S605, the CPU 111 determines whether or not aninstruction for displaying the screen 510 for the wireless LAN settingservice is accepted. In a case where the “use wireless LAN settingservice” key 502 is selected via the setting screen 500, the CPU 111determines that the instruction for displaying the screen 510 for thewireless LAN setting service is accepted, and the processing proceeds toS606. On the other hand, in a case where the “use wireless LAN settingservice” key 502 is not selected, the processing proceeds to S609.

In S606, the CPU 111 displays the screen 510 for the wireless LANsetting service on the operation unit 116, and the processing proceedsto S607. In S607, the CPU 111 stores a flag indicating that theoperation is performed in the wireless LAN setting mode in the RAM 113,and the processing proceeds to S608. The flag stored in the RAM 113 willbe appropriately referred to in a step which will be described below.

On the other hand, in S609, the CPU 111 determines whether or not theother instruction is accepted. In a case where the other instruction isaccepted, the processing proceeds to S610. In a case where the otherinstruction is not accepted, the processing proceeds to S611.

In S610, the CPU 111 performs processing based on the other instructionaccepted in S609. For example, the CPU 111 performs copying processingof printing the image obtained by reading the original by the readingunit 118 on a sheet on the basis of the user instruction or “scan andsend” processing of reading the original by the reading unit 118 to besent to the outside. In a case where the print data is received from theexternal apparatus via the AP 103 or the wired LAN I/F 121, printingprocessing based on the received print data is performed. When theprocessing based on the instruction, the CPU 111 returns to theprocessing in S601.

In S611, the CPU 111 determines whether or not an instruction forshutting down the MFP 101 is accepted. In a case where the instructionfor shutting down the MFP 101 is accepted, shutdown processing ofturning off the power supply to the MFP 101 is executed to end theseries of processings. On the other hand, in a case where theinstruction for shutting down the MFP 101 is not accepted, theprocessing returns to S601.

Next, the cooperation processing with the communication terminal 102using the direct wireless communication in S605 will be described withreference to the flow charts of FIG. 7.

In S701, the CPU 111 performs activation processing for the software AP.The activation processing for the software AP will be described withreference to the flow chart of FIG. 8.

In S801, the CPU 111 determines whether or not the operation isperformed in the mobile cooperation mode. In a case where the flagindicating that the operation is performed in the mobile cooperationmode is stored in the RAM 113, the processing proceeds to S802. In acase where the flag indicating that the operation is performed in themobile cooperation mode is not stored in the RAM 113 (that is, a casewhere the flag indicating that the operation is performed in thewireless LAN setting mode is stored), the processing proceeds to S807.

In S802, the CPU 111 determines whether or not the software AP based onthe setting for the mobile cooperation mode is operating in cooperationwith the wireless LAN I/F 122. When the software AP based on the settingfor the mobile cooperation mode is operating, the processing proceeds toS702 in FIG. 7 (skipping the processings in S803 to S806). When thesoftware AP based on the setting for the mobile cooperation mode is notoperating, the processing proceeds to S803.

In S803, the CPU 111 determines whether or not the software AP for theother use is operating in cooperation with the wireless LAN I/F 122.When the software AP for the other use is operating, the processingproceeds to S804. When the software AP for the other use is not isoperating, the processing proceeds to S805.

In S804, the CPU 111 stops the operating software AP in cooperation withthe wireless LAN I/F 122, and the processing proceeds to S805. In S805,the CPU 111 activates the software AP on the basis of a setting for themobile cooperation. For example, the CPU 111 activates the software APin which the ESSID is set as “PRINTER-AP” and the network key is set as“123”.

In S806, the CPU 111 applies a port filter for the mobile cooperation to“wlan1” where the data is transmitted and received via the software AP.

FIGS. 9A and 9B are explanatory diagrams for describing the port filterapplied to “wlan1” where the data is transmitted and received via thesoftware AP. FIG. 9A is an explanatory diagram for describing a portfilter 910 used when the software AP for the mobile cooperation isactivated. The port filter is used for controlling communications in atransmission port and a reception port.

Ports 9100 and 515 are ports used for the MFP 101 to receive the printdata and used for waiting for the print data in RAW printing or lineprinter remote (LPR) printing. Herein, since the data needs to be waitedfor in Ports 9100 and 515 to receive the print data from the printingapplication of the communication terminal 102, data reception in theports is permitted.

Port 67 is a port used by a Dynamic Host Configuration Protocol (DHCP)service. Port 5353 is a port used for responding to an apparatus searchrequest transmitted from the communication terminal 102 or the like.Since the above-described ports need to transmit the data at the time ofthe cooperation with the printing application, data transmission in theports is permitted.

In this manner, a rule is defined in which the port filter in a casewhere the operation is performed in the mobile cooperation mode releasesonly the ports where the communication occurs at the time of thecooperation with the printing application and closes the other ports.The CPU 111 applies the port filter to “wlan1” where the data istransmitted and received via the software AP. It should be noted that,in a case where the printing application includes other cooperationfunctions, port filtering corresponding to the other cooperationfunctions is appropriately performed. In addition, according to thepresent exemplary embodiment, a rule of the port filtering isexemplified in a white list format, but the configuration is not limitedto this. For example, a definition based on a black list method may beadopted.

As described above, according to the present exemplary embodiment, it ispossible to perform the communication control (access control) based onthe port filter 910 described above on only the data communication viathe software AP activated by the MFP 101.

It should be noted that, in a case where the data communication isperformed with respect to the external AP by using the datacommunication via the wired LAN I/F 121 or a wireless client function,the MFP 101 controls the communication in accordance with a separatelyset port filter. These port filters are generated, for example, by thenetwork administrator on the basis of a security policy previously setin the MFP 101. Therefore, a port filter set for “eth0” is applied to“eth0” corresponding to the network interface where the data istransmitted and received via the wired LAN I/F 121. In a case where thedata communication is performed on the external AP by using the wirelessclient function, a port filter set for “wlan0” is applied to “wlan0”corresponding to the network interface used by the MFP 101 for theinfrastructure connection.

Descriptions will be provided with reference to FIG. 8 again. In S807,the CPU 111 determines whether or not the software AP based on thesetting for the wireless LAN setting mode is operating in cooperationwith the wireless LAN I/F 122. When the software AP based on the settingfor the wireless LAN setting mode is operating, the processing proceedsto S702 in FIG. 7. When the software AP based on the setting for thewireless LAN setting mode is not operating, the processing proceeds toS808.

In S808, the CPU 111 determines whether or not the software AP for theother use is operating in cooperation with the wireless LAN I/F 122.When the software AP for the other use is operating, the processingproceeds to S809. When the software AP for the other use is notoperating, the processing proceeds to S810.

In S809, the CPU 111 stops the operating software AP in cooperation withthe wireless LAN I/F 122, and the processing proceeds to S810. In S810,the CPU 111 activates the software AP on the basis of the setting forthe wireless LAN setting mode. For example, the CPU 111 activates thesoftware AP in which the ESSID is set as “PRINTER-ConfigAP” and thenetwork key is set as “456”.

In S811, the CPU 111 applies the port filter for the wireless LANsetting mode to “wlan1” where the data is transmitted and received viathe software AP. According to the present exemplary embodiment, a ruleis described in the port filter for the wireless LAN setting mode usedin S811 for performing communication control which is different fromthat of the port filter for the mobile cooperation used in S806. Thisconfiguration will be described with reference to FIG. 9B.

FIG. 9B is an explanatory diagram for describing a port filter 920applied to “wlan1” in a case where the software AP for the mobilecooperation is activated.

Port 161 is a port used in Simple Network Management Protocol (SNMP),and Port 80 is a port used in Hyper Text Transfer Protocol (HTTP). Port5683 is a port used in Constrained Application Protocol (CoAP). Sincethese ports are used for transmitting and receiving the data at the timeof the cooperation with the setting application, the data transmissionand reception in the above-described ports are permitted. Since Port 67used by the DHCP service and Port 5353 for performing a search are portsused for transmitting the data at the time of the cooperation with thesetting application, the transmission of data using the above-describedports is permitted.

In a case where the software AP for the wireless LAN setting service isactivated, a port filter having a rule described in which only portswhere the communication occurs at the time of the cooperation with thesetting application of the communication terminal are released and theother ports are closed is applied to “wlan1”. Therefore, in a case wherethe software AP for the wireless LAN setting service is activated, theMFP 101 can discard the data transmitted towards the port used forwaiting for the print data in the RAW printing or the LPR printingwithout receiving the data.

In a case where the above-described software AP for the mobilecooperation is activated, the MFP 101 can discard the communicationsusing Ports 161, 80, and 5683 which are used in the setting application.Therefore, the cooperation with the setting application is not performedwhile the MFP 101 activates the software AP for the mobile cooperation.

When the application of the port filter to “wlan1” where the data istransmitted and received via the software AP is completed, theprocessing proceeds to S702 in FIG. 7. In S702, the CPU 111 performsconnection processing when a connection request with respect to thesoftware AP is accepted from the communication terminal 102.

In S703, in a case where the CPU 111 establishes the wirelesscommunication using the software AP, the processing proceeds to S704. Ina case where the wireless communication using the software AP is notestablished, the processing proceeds to S710.

In S704, the CPU 111 determines whether or not the wireless LAN settingdata is received from the communication terminal 102 via the softwareAP. In a case where the wireless LAN setting data is received, theprocessing proceeds to S705. In a case where the wireless LAN settingdata is not received, the processing proceeds to S708.

It should be noted that, since the port for accepting the setting datais released in a case where the software AP for the wireless LAN settingmode is activated as described with reference to FIG. 8 and FIGS. 9A and9B, it is possible to receive the wireless LAN setting data transmittedfrom the communication terminal 102. On the other hand, in a case wherethe software AP for the mobile cooperation mode is activated, even ifthe setting data is transmitted from the communication terminal 102 tothe MFP 101, the above-described setting data is discarded withoutreceiving the setting data since the port for accepting the setting datais closed.

In S705, the CPU 111 analyzes the received setting data and obtains theESSID, the security key, and the like included in the setting data asthe connection information. In addition, the CPU 111 stores the obtainedconnection information as the wireless network setting for the MFP 101to be connected to the external AP.

In S706, the CPU 111 stops the operating software AP in cooperation withthe wireless LAN I/F 122, and the processing proceeds to S707.

In S707, the CPU 111 controls the wireless LAN I/F 122 and reflects thewireless network setting for establishing the connection to the externalAP. It should be noted that reactivation of the MFP 101 is performed ifthe reactivation of the MFP 101 needs to be performed to reflect thesetting. When the reflection processing is completed, the series ofcooperation processings are ended, and the processing returns to S601.

In S708, the CPU 111 determines whether or not the print data isreceived from the communication terminal 102 via the software AP. In acase where the print data is received, the processing proceeds to S709.In a case where the print data is not received, the processing proceedsto S710.

It should be noted that, in a case where the software AP for the mobilecooperation mode is activated as described with reference to FIG. 8 andFIGS. 9A and 9B, it is possible to receive the print data transmittedfrom the communication terminal 102 since the port for accepting theprint data is released. On the other hand, in a case where the softwareAP for the wireless LAN setting mode is activated, the port foraccepting the print data is closed. Therefore, even if the print data istransmitted from the communication terminal 102 to the MFP 101, thisprint data is discarded without receiving the print data since the portfor accepting the print data is closed.

In S709, the CPU 111 prints an image on a sheet on the basis of thereceived print data. When the printing is completed, the processingproceeds to S710.

In S710, the CPU 111 determines whether or not an instruction forstopping the software AP is accepted. In a case where the instructionfor stopping the software AP is accepted, the processing proceeds toS711. In a case where the instruction for stopping the software AP isnot accepted, the processing returns to S702.

In S711, the CPU 111 stops the activated software AP. When theprocessing in S711 is completed, the series of cooperation processingsare ended, and the processing returns to S601.

As described above, according to the present exemplary embodiment, thecommunication control based on the different port filter is performed inaccordance with the operation mode when the direct wirelesscommunication is performed. Therefore, in a case where the cooperationbetween the communication terminal 102 and the MFP 101 is performed bythe direct wireless communication, it is possible to perform theappropriate communication control in accordance with the operation mode.

MODIFIED EXAMPLE 1

According to the first exemplary embodiment, the configuration has beendescribed where the port filter applied to the network interface wherethe data is transmitted and received via the software AP is varied whileit is presumed that the wireless LAN I/F 122 does not activate aplurality of software APs at the same time.

Incidentally, a wireless LAN module that can activate a plurality ofsoftware APs at the same time has been developed along progresses indevice and chip development technologies.

According to Modified Example 1, control will be described while it ispresumed that the wireless LAN I/F 122 can activate the plurality ofsoftware APs at the same time. It should be noted that, according toModified Example 1, a difference in hardware configurations of thepresumed apparatuses is only the wireless LAN I/F 122, and the otherconfigurations are similar to the first exemplary embodiment. Thewireless LAN I/F 122 included in the MFP 101 according to ModifiedExample 1 activates a plurality of software APs at the same time and canindependently operate the plurality of software APs.

Therefore, a logical network interface where the data is transmitted andreceived via the software AP is provided for each software AP accordingto Modified Example 1. For example, in a case where the wireless LAN I/F122 operates the software AP for the wireless LAN setting and thesoftware AP for the mobile cooperation according to Modified Example 1and logically includes four network interface. Herein, the wired LANnetwork interface is referred to as “eth0”, and the network interface inthe infrastructure mode is referred to as “wlan0” similarly as in thefirst exemplary embodiment. The network interface where the data istransmitted and received via the software AP activated for the wirelessLAN setting is referred to as “wlan1”. The network interface where thedata is transmitted and received via the software AP activated for themobile cooperation is referred to as “wlan2”.

FIG. 10 is a flow chart for describing the activation processing for thesoftware AP according to the modified example. The flow chart of FIG. 10is executed instead of the flow chart of FIG. 8 according to the firstexemplary embodiment. Respective operations (steps) illustrated in theflow chart of FIG. 10 are realized when the CPU 111 reads out theprograms for realizing the respective control modules which are storedin the ROM 112 or the storage 114 onto the RAM 113 to be executed.

In S1001, the CPU 111 determines whether or not the operation isperformed in the mobile cooperation mode. In a case where the operationis performed in the mobile cooperation mode, the processing proceeds toS1002. In a case where the operation is not performed in the mobilecooperation mode, the processing proceeds to S1007. This processing issimilar to the processing in S801 according to the first exemplaryembodiment.

In S1002, the CPU 111 determines whether or not the software AP based onthe setting for the mobile cooperation mode is operating in cooperationwith the wireless LAN I/F 122. When the software AP is operating, theactivation processing for the software AP is ended. When the software APis not operating, the processing proceeds to S1003.

In S1003, the CPU 111 generates the software AP based on the setting forthe mobile cooperation in cooperation with the wireless LAN I/F 122. Forexample, the CPU 111 generates the software AP in which the ESSID is setas “PRINTER-AP” and the network key is set as “123”. For convenience ofthe descriptions, the software AP generated in S1003 will be referred toas a software AP1. When the generation of the software AP1 is completed,the processing proceeds to S1004.

In S1004, the CPU 111 applies the port filter for the mobile cooperationto “wlan1” corresponding to the network interface where the data istransmitted and received via the software AP1 generated in S1003. Whenthe application is completed, the activation processing for the softwareAP is ended. As a result of this processing, the MFP 101 can permit thecommunication used at the time of the cooperation with the printingapplication of the communication terminal 102 and restrict the othercommunication in the wireless direct communication via the software AP1activated for the mobile cooperation mode.

On the other hand, in S1007, the CPU 111 determines whether or not thesoftware AP based on the setting for the wireless LAN setting mode isoperating in cooperation with the wireless LAN I/F 122. When thesoftware AP is operating, the activation processing for the software APis ended. When the software AP is not operating, the processing proceedsto S1008.

In S1008, the CPU 111 generates the software AP based on the setting forthe wireless LAN setting mode in cooperation with the wireless LAN I/F122. For example, the CPU 111 generates the software AP in which theESSID is set as “PRINTER-ConfigAP” and the network key is set as “456”.For convenience of the descriptions, the software AP generated in S1008will be referred to as a software AP2. When the generation of thesoftware AP2 is completed, the processing proceeds to S1009.

In S1009, the CPU 111 applies the port filter for the wireless LANsetting mode to “wlan2” corresponding to the network interface where thedata is transmitted and received via the software AP2 generated inS1008. When the application is completed, the activation processing forthe software AP is ended. As a result of this processing, the MFP 101can permit the communication used at the time of the cooperation withthe setting application of the communication terminal 102 and restrictthe other communication in the wireless direct communication via thesoftware AP2 activated for the wireless LAN setting mode.

As described above, according to Modified Example 1, even in a casewhere the MFP 101 includes the wireless LAN I/F 122 that can activatethe plurality of software APs, it is possible to apply the differentport filter to each of the network interfaces where the communication isperformed by using the software AP. Therefore, it is possible to varythe access control at the time of the direct wireless communication foreach of software APs to be generated.

Other Exemplary Embodiments

Furthermore, a configuration may be adopted where the networkadministrator can change the port filter for the mobile cooperationapplied to the activated software AP or the port filter for the wirelessLAN setting.

FIGS. 11A and 11B illustrate an example of the screen displayed on theoperation unit 116 of the MFP 101, illustrating a setting change screenof the port filter. First, FIG. 11A will be described.

FIG. 11A illustrates an example of a screen for the user who has theauthority of the network management of the MFP 101 to change the settingof the port filter. The user can change the setting of the portfiltering by pressing an edit key. The user can also add a new rule ofthe port filtering by pressing an add key. It should be noted that theport numbers can also be set by specifying a range like “10-200”.Although FIG. 11A illustrates the example of the setting change of theport filter for the mobile cooperation, a similar method can be adoptedto perform the setting change of the port filter for the wireless LANsetting mode.

The CPU 111 of the MFP 101 updates the port filter stored in the storage114 on the basis of the setting performed via the screen of FIG. 11A.When the update is completed, it is possible to perform the accesscontrol of the wireless communication via the software AP on the basisof the completed port filter. Therefore, it is possible to perform thesetting change of the port filter also in a case where the new functionis added to the application of the MFP 101 or the communicationterminal.

FIG. 11B illustrates a modified example of the screen for the user whohas the authority of the network management of the MFP 101 to change thesetting of the port filter. In FIG. 11B, the user who has the authorityof the network management can more easily perform the setting withregard to the permission or prohibition of the communication. The usercan set each of the respective functions to be used in cooperation withthe communication terminal 102 as ON or OFF via the screen of FIG. 11B.

The MFP 101 previously stores a port number list for each function inthe storage 114 which is used when the function is used. The CPU 111updates the port filter stored in the storage 114 on the basis of thesetting change with regard to the ON or OFF state which is performed viathe screen of FIG. 11B and the port number list for each of therespective functions stored in the storage 114. It should be noted thatFIG. 11B illustrates the example of the setting change in the portfilter for the mobile cooperation, but a similar method can also be usedto perform the setting change in the port filter for the wireless LANsetting mode.

In addition, according to the above-described exemplary embodiment, theMFP 101 and the communication terminal 102 execute the direct wirelesscommunication via the software AP of the MFP 101 as described above, butthe execution method of the direct wireless communication is not limitedto this. For example, the direct wireless communication may be executedon the basis of Wi-Fi Direct (registered trademark) specified by Wi-FiAlliance.

As described above, according to an aspect of the present invention,even in a case where the direct wireless communication is used for theplurality of uses, it is possible to appropriately control thecooperation between the communication terminal and the informationprocessing apparatus.

Other Embodiments

Embodiments of the present invention can also be realized by a computerof a system or apparatus that reads out and executes computer executableinstructions recorded on a storage medium (e.g., non-transitorycomputer-readable storage medium) to perform the functions of one ormore of the above-described embodiment(s) of the present invention, andby a method performed by the computer of the system or apparatus by, forexample, reading out and executing the computer executable instructionsfrom the storage medium to perform the functions of one or more of theabove-described embodiment(s). The computer may comprise one or more ofa central processing unit (CPU), micro processing unit (MPU), or othercircuitry, and may include a network of separate computers or separatecomputer processors. The computer executable instructions may beprovided to the computer, for example, from a network or the storagemedium. The storage medium may include, for example, one or more of ahard disk, a random-access memory (RAM), a read only memory (ROM), astorage of distributed computing systems, an optical disk (such as acompact disc (CD), digital versatile disc (DVD), or Blu-ray Disc (BD)™),a flash memory device, a memory card, and the like.

While the present invention has been described with reference toexemplary embodiments, it is to be understood that the invention is notlimited to the disclosed exemplary embodiments. The scope of thefollowing claims is to be accorded the broadest interpretation so as toencompass all such modifications and equivalent structures andfunctions.

This application claims the benefit of Japanese Patent Application No.2016-232716 filed Nov. 30, 2016, which is hereby incorporated byreference herein in its entirety.

What is claimed is:
 1. An information processing apparatus that performsa direct wireless communication with a communication terminal, theinformation processing apparatus comprising: a wireless local areanetwork (LAN) interface; a memory device that stores set ofinstructions; and at least one processor that executes the instructionsof controlling the wireless LAN interface to activate an access point tobe used in the direct wireless communication, and controlling, uponcondition that the information processing apparatus operates in a firstmode where an instruction for a predetermined setting change of theinformation processing apparatus is waited for from the communicationterminal by using the direct wireless communication, transmission andreception of data via the access point by using a first communicationfilter, and controlling, upon condition that the information processingapparatus operates in a second mode which is different from the firstmode, the transmission and the reception of the data via the accesspoint by using a second communication filter.
 2. The informationprocessing apparatus according to claim 1, wherein the first mode is anoperation mode adopted upon condition that a network setting of theinformation processing apparatus is changed by using the communicationterminal, and the second mode is an operation mode adopted uponcondition that print data is received from the communication terminaland printed.
 3. The information processing apparatus according to claim1, wherein the wireless LAN interface is controlled to activate theaccess point upon condition that a user instruction for operating theinformation processing apparatus in the first mode is accepted or uponcondition that a user instruction for operating the informationprocessing apparatus in the second mode is accepted.
 4. The informationprocessing apparatus according to claim 3, wherein, upon condition thata user instruction for using the second mode is accepted in a state inwhich the access point is activated in a setting for the first mode, theaccess point in a setting for the second mode is activated instead ofthe access point activated in the setting for the first mode.
 5. Theinformation processing apparatus according to claim 4, wherein, uponcondition that a user instruction for using the first mode is acceptedin a state in which the access point is activated in the setting for thesecond mode, the access point in the setting for the first mode isactivated instead of the access point activated in the setting for thesecond mode.
 6. The information processing apparatus according to claim5, wherein the setting for the first mode and the setting for the secondmode include at least a service set identifier (SSID) for identifyingthe access point and a network key.
 7. The information processingapparatus according to claim 1, wherein the first communication filteris structured in a manner that reception of at least print data is notpermitted, and the second communication filter is structured in a mannerthat the reception of at least the print data is permitted.
 8. Theinformation processing apparatus according to claim 1, wherein the firstcommunication filter and the second communication filter are portfilters.
 9. The information processing apparatus according to claim 1,wherein the wireless LAN interface can further operate in aninfrastructure mode for establishing a connection to a network providedby an access point outside the information processing apparatus, andwherein, upon condition that the wireless communication is performedwith an outside in the infrastructure mode, the transmission and thereception of the data with the outside are controlled on a basis of athird communication filter.
 10. The information processing apparatusaccording to claim 1, further comprising a wired LAN interface, wherein,upon condition that a communication is performed with an outside via thewired LAN interface, the transmission and the reception of the data withthe outside are controlled on a basis of a third communication filter.11. The information processing apparatus according to claim 1, whereinthe information processing apparatus is a printer.
 12. A control methodfor an information processing apparatus that includes a wireless localarea network (LAN) interface and performs a direct wirelesscommunication with a communication terminal via the wireless LANinterface, the control method comprising: controlling the wireless LANinterface to activate an access point to be used in the direct wirelesscommunication; and controlling, upon condition that the informationprocessing apparatus operates in a first mode where an instruction for apredetermined setting change of the information processing apparatus iswaited for from the communication terminal by using the direct wirelesscommunication, transmission and reception of data via the access pointby using a first communication filter, and controlling, upon conditionthat the information processing apparatus operates in a second modewhich is different from the first mode, the transmission and thereception of the data via the access point by using a secondcommunication filter.
 13. A non-transitory computer-readable storagemedium storing a program for causing a computer to execute a method forcontrolling an information processing apparatus that includes a wirelesslocal area network (LAN) interface and performs a direct wirelesscommunication with a communication terminal via the wireless LANinterface, the method comprising: controlling the wireless LAN interfaceto activate an access point to be used in the direct wirelesscommunication; and controlling, upon condition that the informationprocessing apparatus operates in a first mode where an instruction for apredetermined setting change of the information processing apparatus iswaited for from the communication terminal by using the direct wirelesscommunication, transmission and reception of data via the access pointby using a first communication filter, and controlling, upon conditionthat the information processing apparatus operates in a second modewhich is different from the first mode, the transmission and thereception of the data via the access point by using a secondcommunication filter.